$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft File: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft (raw, json) Hash identifier: ISEMrro7388vloZPSNf9h+mI4Ln38pffZvBPEytBY4A= Subject key identifier: 74:0F:85:09:C8:7C:9F:FB:76:FD:7D:8B:1F:E5:C1:26:18:7D:C1:32 Authority key identifier: 9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 Certificate issuer: /CN=A9147CBE/serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Certificate serial: 35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft Manifest number: 34 Signing time: Sun 27 Apr 2025 06:27:08 +0000 Manifest this update: Sun 27 Apr 2025 06:27:07 +0000 Manifest next update: Sun 04 May 2025 06:27:07 +0000 Files and hashes: 1: mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl (hash: FyM9VDPIyLc7AOVPc8sVucLOmVSb6OCC4wf8d+T/3aA=) 2: 6D66CE8017BA11F094861F7DC4F9AE02.roa (hash: +D4BVGFKWyg9Pr75Q40/ty5hMk4DuavCG4i3TGDDyg0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 May 2025 02:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53 (0x35) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9147CBE, serialNumber=9A1624F46082F54AC5778859E226BD3BA69023F4 Validity Not Before: Apr 27 06:27:07 2025 GMT Not After : May 4 06:27:07 2025 GMT Subject: CN=680dce3b-9ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:92:87:71:a0:2a:7f:bb:8d:35:a6:58:3f:14: e1:d0:6b:34:77:85:1b:10:a6:91:96:1b:68:fe:d1: 9b:93:b2:67:d2:9d:a1:56:3d:32:cd:9e:73:6f:ad: 87:d9:b0:5d:c8:5a:85:40:0f:e8:b2:27:0c:22:e8: 2a:1c:8e:09:23:04:aa:4b:6e:c4:f8:7a:cb:f2:69: ab:41:38:f0:f1:26:18:4b:bf:f3:36:c6:ff:3b:01: f7:33:27:74:28:1c:1a:26:af:b1:31:9f:b5:5a:d3: 5d:23:e9:6f:ac:4d:c6:c9:43:16:3e:01:bb:36:ab: b8:5b:ba:8b:7c:3d:c1:3d:97:e8:80:89:06:d0:3d: 4d:28:ec:0e:2c:b2:2f:cf:65:52:dc:45:70:ef:48: a5:8c:a7:4e:91:cf:03:e5:0f:f6:32:24:67:1a:1b: 3e:b4:6b:83:80:8f:31:01:e3:9a:b9:69:99:62:40: 5e:48:74:6d:49:d1:20:a6:56:19:32:4f:c6:53:ca: a4:6d:48:65:4f:e1:ab:00:c1:f5:4c:40:a1:e3:f1: 9c:d8:02:38:3d:ad:45:47:27:00:63:6c:3b:ff:b9: 5b:ff:6e:72:66:61:40:8b:90:18:b0:71:12:52:db: 57:a2:d2:c2:34:92:35:c3:ca:62:5c:70:2d:97:dc: bc:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0F:85:09:C8:7C:9F:FB:76:FD:7D:8B:1F:E5:C1:26:18:7D:C1:32 X509v3 Authority Key Identifier: keyid:9A:16:24:F4:60:82:F5:4A:C5:77:88:59:E2:26:BD:3B:A6:90:23:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CBE/83BA87AED7C211EF8190DA5CC4F9AE02/mhYk9GCC9UrFd4hZ4ia9O6aQI_Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b5:15:7f:4b:50:4a:47:9d:a8:b3:d3:a8:77:8c:32:87:2d: 79:ce:6b:39:36:ec:0d:27:ef:65:fe:34:f2:74:6a:26:b5:b1: 9c:20:6a:6a:77:70:bc:e7:d6:21:66:cd:83:e1:ff:ad:cd:c7: a2:56:e1:67:a5:b3:9a:8f:ad:15:11:b2:a4:d0:1d:ae:fd:0b: 52:1e:1d:b7:0f:4e:66:a2:19:f5:9f:26:6e:28:0a:31:e5:b5: 8e:34:68:24:6c:a4:16:3b:74:63:8d:f1:97:54:80:ae:9b:ed: fc:5c:e4:6c:6f:de:6d:8d:5d:da:dd:fa:34:a5:0d:b6:82:02: c0:b4:be:13:2d:16:77:ae:bf:b6:64:ad:71:14:f4:3d:13:88: 61:c6:f4:af:5e:63:a5:70:1b:2f:99:6f:a5:12:10:4b:5a:e2: f6:f6:aa:3c:48:05:54:cc:1b:a7:31:73:b7:78:44:96:ab:a3: 79:36:b7:1d:69:44:3e:7d:a7:1c:07:db:b9:41:8a:f8:d6:86: 8a:02:d1:2e:b1:9c:95:76:c4:df:2d:38:c4:73:68:53:fe:5b: 5d:d3:4c:90:4a:e5:63:f1:01:c3:08:39:fa:df:f5:3a:5a:ce: 9a:2b:9c:b8:af:a8:06:20:46:76:85:39:dd:bb:ee:bb:d4:e6: 2a:1a:aa:1b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 N0NCRTExMC8GA1UEBRMoOUExNjI0RjQ2MDgyRjU0QUM1Nzc4ODU5RTIyNkJEM0JB NjkwMjNGNDAeFw0yNTA0MjcwNjI3MDdaFw0yNTA1MDQwNjI3MDdaMBgxFjAUBgNV BAMTDTY4MGRjZTNiLTliYTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHkodxoCp/u401plg/FOHQazR3hRsQppGWG2j+0ZuTsmfSnaFWPTLNnnNvrYfZ sF3IWoVAD+iyJwwi6CocjgkjBKpLbsT4esvyaatBOPDxJhhLv/M2xv87AfczJ3Qo HBomr7Exn7Va010j6W+sTcbJQxY+Abs2q7hbuot8PcE9l+iAiQbQPU0o7A4ssi/P ZVLcRXDvSKWMp06RzwPlD/YyJGcaGz60a4OAjzEB45q5aZliQF5IdG1J0SCmVhky T8ZTyqRtSGVP4asAwfVMQKHj8ZzYAjg9rUVHJwBjbDv/uVv/bnJmYUCLkBiwcRJS 21ei0sI0kjXDymJccC2X3LyxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdA+FCch8 n/t2/X2LH+XBJhh9wTIwHwYDVR0jBBgwFoAUmhYk9GCC9UrFd4hZ4ia9O6aQI/Qw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0JFLzgzQkE4N0FFRDdD MjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVyRmQ0aFo0aWE5TzZhUUlf US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbWhZazlHQ0M5VXJGZDRoWjRpYTlPNmFRSV9RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 Q0JFLzgzQkE4N0FFRDdDMjExRUY4MTkwREE1Q0M0RjlBRTAyL21oWWs5R0NDOVVy RmQ0aFo0aWE5TzZhUUlfUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAB+1FX9LUEpHnaiz06h3jDKHLXnOazk27A0n72X+NPJ0aia1sZwgamp3 cLzn1iFmzYPh/63Nx6JW4Wels5qPrRURsqTQHa79C1IeHbcPTmaiGfWfJm4oCjHl tY40aCRspBY7dGON8ZdUgK6b7fxc5Gxv3m2NXdrd+jSlDbaCAsC0vhMtFneuv7Zk rXEU9D0TiGHG9K9eY6VwGy+Zb6USEEta4vb2qjxIBVTMG6cxc7d4RJaro3k2tx1p RD59pxwH27lBivjWhooC0S6xnJV2xN8tOMRzaFP+W13TTJBK5WPxAcMIOfrf9Tpa zpornLivqAYgRnaFOd277rvU5ioaqhs= -----END CERTIFICATE-----Generated at Sun Apr 27 08:07:43 2025 by rpki-client on console.sobornost.net